This is the latest svn build. Not sure why the version server is throwing the August date when requested, but this is indeed the latest svn update.
If it segfaults again, I will try to get a gdb session on it. --Brian ________________________________ From: [email protected] [[email protected]] on behalf of Luca Deri [[email protected]] Sent: Tuesday, December 13, 2011 8:55 AM To: [email protected] Subject: Re: [Ntop-misc] Segfault after two days Brian I have just realized that this code is pretty old (august). Please resync before trying again Luca On Dec 12, 2011, at 1:19 PM, Brian Behrens wrote: Luca, Looks like I made it two days before a segfault occurred, here is the logs: Dec 8 13:14:59 probe ntop[856]: THREADMGMT[t140664941140320]: ntop RUNSTATE: PREINIT(1) Dec 8 13:14:59 probe ntop[856]: THREADMGMT[t140664941140320]: ntop RUNSTATE: INIT(2) Dec 8 13:14:59 probe ntop[856]: ntop v.4.1.2 (64 bit) Dec 8 13:14:59 probe ntop[856]: Configured on Dec 8 2011 13:13:05, built on Dec 8 2011 13:13:50. Dec 8 13:14:59 probe ntop[856]: Copyright 1998-2011 by Luca Deri <[email protected]<mailto:[email protected]>> Dec 8 13:14:59 probe ntop[856]: Get the freshest ntop from http://www.ntop.org/ Dec 8 13:14:59 probe ntop[856]: NOTE: ntop is running from '/usr/bin' Dec 8 13:14:59 probe ntop[856]: NOTE: (but see warning on man page for the --instance parameter) Dec 8 13:14:59 probe ntop[856]: NOTE: ntop libraries are in '/usr/lib64' Dec 8 13:14:59 probe ntop[856]: Initializing ntop Dec 8 13:14:59 probe kernel: [ 14.553106] (C) 2004-11 L.Deri <[email protected]<mailto:[email protected]>> Dec 8 13:14:59 probe ntop[856]: Checking eth1 for additional devices Dec 8 13:14:59 probe ntop[856]: Resetting traffic statistics for device Server Dec 8 13:14:59 probe ntop[856]: Initializing device eth1 (0) Dec 8 13:14:59 probe ntop[856]: DLT: Device 0 [eth1] is 1, mtu 9000, header 14 Dec 8 13:14:59 probe ntop[856]: Initialized events [mask: 0][path: ] Dec 8 13:14:59 probe ntop[856]: Initializing gdbm databases Dec 8 13:14:59 probe ntop[856]: VENDOR: Loading MAC address table. Dec 8 13:14:59 probe ntop[856]: VENDOR: Checking for MAC address table file Dec 8 13:14:59 probe ntop[856]: VENDOR: Loading newer file '/etc/ntop/specialMAC.txt.gz' Dec 8 13:14:59 probe ntop[856]: VENDOR: ...found 61 lines Dec 8 13:14:59 probe ntop[856]: VENDOR: ...loaded 59 records Dec 8 13:14:59 probe ntop[856]: VENDOR: Checking for MAC address table file Dec 8 13:14:59 probe ntop[856]: VENDOR: Loading newer file '/etc/ntop/oui.txt.gz' Dec 8 13:15:00 probe ntop[856]: VENDOR: ...found 79133 lines Dec 8 13:15:00 probe ntop[856]: VENDOR: ...loaded 12449 records Dec 8 13:15:00 probe ntop[856]: Fingerprint: Loading signature file Dec 8 13:15:00 probe ntop[856]: Fingerprint: Checking for Fingerprint file... file Dec 8 13:15:00 probe ntop[856]: Fingerprint: Loading file '/etc/ntop/etter.finger.os.gz' Dec 8 13:15:00 probe ntop[856]: Fingerprint: ...loaded 1765 records Dec 8 13:15:00 probe ntop[856]: Initializing external applications Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664851011328]: SFP: Started thread for fingerprinting Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664851011328]: SFP: Fingerprint scan thread starting [p856] Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664842618624]: SIH: Started thread for idle hosts detection Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664842618624]: SIH: Idle host scan thread starting [p856] Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664834225920]: DNSAR(1): Started thread for DNS address resolution Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664834225920]: DNSAR(1): Address resolution thread running Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664825833216]: DNSAR(2): Address resolution thread running Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664825833216]: DNSAR(2): Started thread for DNS address resolution Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664608126720]: DNSAR(3): Started thread for DNS address resolution Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664608126720]: DNSAR(3): Address resolution thread running Dec 8 13:15:00 probe ntop[856]: Calling plugin start functions (if any) Dec 8 13:15:00 probe ntop[856]: GeoIP: loaded config file /etc/ntop/GeoLiteCity.dat Dec 8 13:15:00 probe ntop[856]: GeoIP: loaded ASN config file /etc/ntop/GeoIPASNum.dat Dec 8 13:15:00 probe ntop[856]: SSL: Initializing... Dec 8 13:15:00 probe ntop[856]: SSL_PRNG: Automatically initialized! Dec 8 13:15:00 probe ntop[856]: SSL initialized successfully Dec 8 13:15:00 probe ntop[856]: INITWEB: Initializing web server Dec 8 13:15:00 probe ntop[856]: INITWEB: Initializing TCP/IP socket connections for web server Dec 8 13:15:00 probe ntop[856]: INITWEB: Initialized socket, port 3000, address (any) Dec 8 13:15:00 probe ntop[856]: INITWEB: Waiting for HTTP connections on port 3000 Dec 8 13:15:00 probe ntop[856]: INITWEB: Initialized ssl socket, port 3001, address (any) Dec 8 13:15:00 probe ntop[856]: INITWEB: Waiting for HTTPS (SSL) connections on port 3001 Dec 8 13:15:00 probe ntop[856]: INITWEB: Starting web server Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664599734016]: INITWEB: Started thread for web server Dec 8 13:15:00 probe ntop[856]: Listening on [Server] Dec 8 13:15:00 probe ntop[856]: Loading Plugins Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664599734016]: WEB: Server connection thread starting [p856] Dec 8 13:15:00 probe ntop[856]: Note: SIGPIPE handler set (ignore) Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664599734016]: WEB: Server connection thread running [p856] Dec 8 13:15:00 probe ntop[856]: WEB: ntop's web server is now processing requests Dec 8 13:15:00 probe ntop[856]: Searching for plugins in /usr/lib64/ntop/plugins Dec 8 13:15:00 probe ntop[856]: RRD: Welcome to Round-Robin Database. (C) 2002-11 by Luca Deri. Dec 8 13:15:00 probe ntop[856]: LASTSEEN: Welcome to Host Last Seen. (C) 1999 by Andrea Marangoni Dec 8 13:15:00 probe ntop[856]: NETFLOW: Welcome to NetFlow.(C) 2002-11 by Luca Deri Dec 8 13:15:00 probe ntop[856]: CPACKET: Welcome to cPacket.(C) 2008 by Luca Deri Dec 8 13:15:00 probe ntop[856]: PDA: Welcome to PDA. (C) 2001-2004 by L.Deri and W.Brock Dec 8 13:15:00 probe ntop[856]: SFLOW: Welcome to sFlow.(C) 2002-11 by Luca Deri Dec 8 13:15:00 probe ntop[856]: ICMP: Welcome to ICMPWatch. (C) 1999-2005 by Luca Deri Dec 8 13:15:00 probe ntop[856]: Calling plugin start functions (if any) Dec 8 13:15:00 probe ntop[856]: RRD: Welcome to the RRD plugin Dec 8 13:15:00 probe ntop[856]: RRD: Mask for new directories is 0700 Dec 8 13:15:00 probe ntop[856]: RRD: Mask for new files is 0066 Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664582813440]: RRD: Data collection thread starting [p856] Dec 8 13:15:00 probe ntop[856]: THREADMGMT: RRD: Started thread (t140664582813440) for data collection Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664941140320]: ntop RUNSTATE: INITNONROOT(3) Dec 8 13:15:00 probe ntop[856]: Now running as requested user 'ntop' (489:486) Dec 8 13:15:00 probe ntop[856]: Note: Reporting device initally set to 0 [Server] (merged) Dec 8 13:15:00 probe ntop[856]: INIT: Created pid file (/var/nst/ntop/ntop.pid) Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664941140320]: ntop RUNSTATE: RUN(4) Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664574420736]: NPS(1): Started thread for network packet sniffing [eth1] Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664851011328]: SFP: Fingerprint scan thread running [p856] Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664842618624]: SIH: Idle host scan thread running [p856] Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664574420736]: NPS(Server): pcapDispatch thread starting [p856] Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664574420736]: NPS(Server): pcapDispatch thread running [p856] Dec 8 13:15:05 probe ntop[856]: CHKVER: Checking current ntop version atversion.ntop.org/version.xml<http://version.ntop.org/version.xml> Dec 8 13:15:05 probe ntop[856]: CHKVER: Version file is from 'version.ntop.org' Dec 8 13:15:05 probe ntop[856]: CHKVER: as of date is '2011-08-15T11:00:47' Dec 8 13:15:05 probe ntop[856]: CHKVER: This version of ntop is a new DEVELOPMENT version - Be careful! Dec 8 13:15:10 probe ntop[856]: THREADMGMT[t140664563902208]: RRD: Started thread for throughput data collection Dec 8 13:15:10 probe ntop[856]: THREADMGMT[t140664563902208]: RRD: Throughput data collection: Thread starting [p856] Dec 8 13:15:10 probe ntop[856]: THREADMGMT[t140664582813440]: RRD: Data collection thread running [p856] Dec 8 13:15:10 probe ntop[856]: THREADMGMT[t140664563902208]: RRD: Throughput data collection: Thread running [p856] Dec 8 17:12:07 probe ntop[856]: **ERROR** Bad magic number (expected=1968/real=1290) [deviceId=0] lookupHost()[pbuf.c:1421] Dec 8 20:26:11 probe ntop[856]: **ERROR** Bad magic number (expected=1968/real=1290) [deviceId=0] lookupHost()[pbuf.c:1421] Dec 9 01:31:17 probe ntop[856]: **ERROR** Bad magic number (expected=1968/real=1290) [deviceId=0] lookupHost()[pbuf.c:1421] Dec 9 07:12:23 probe ntop[856]: **ERROR** Bad magic number (expected=1968/real=1290) [deviceId=0] lookupHost()[pbuf.c:1421] Dec 9 09:19:27 probe ntop[856]: **ERROR** Bad magic number (expected=1968/real=1290) [deviceId=0] lookupHost()[pbuf.c:1421] Dec 9 15:06:38 probe ntop[856]: **ERROR** Bad magic number (expected=1968/real=1290) [deviceId=0] lookupHost()[pbuf.c:1422] Dec 9 19:41:44 probe ntop[856]: **ERROR** Bad magic number (expected=1968/real=1290) [deviceId=0] lookupHost()[pbuf.c:1421] Dec 10 00:41:50 probe ntop[856]: **ERROR** Bad magic number (expected=1968/real=1290) [deviceId=0] lookupHost()[pbuf.c:1421] Dec 10 00:55:50 probe ntop[856]: **ERROR** Bad magic number (expected=1968/real=1290) [deviceId=0] lookupHost()[pbuf.c:1421] Dec 10 01:25:50 probe ntop[856]: **ERROR** Bad magic number (expected=1968/real=1290) [deviceId=0] lookupHost()[pbuf.c:1422] Dec 10 07:47:57 probe ntop[856]: **ERROR** Bad magic number (expected=1968/real=1290) [deviceId=0] lookupHost()[pbuf.c:1422] Dec 10 07:51:31 probe kernel: [153334.395431] ntop[939]: segfault at 8 ip 00007fef1bfe4401 sp 00007fef05fd7510 error 4 in libntop-4.1.2.so[7fef1bfbe000+75000] Any ideas? --Brian _______________________________________________ Ntop-misc mailing list [email protected]<mailto:[email protected]> http://listgateway.unipi.it/mailman/listinfo/ntop-misc
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
